A dynamic script is handling all requests, so there is no "webroot" directory where you can put stuff for them to appear under /
You could quite easily add a location /.well-known rule to the server, right?
Oh yeah, I didn't know about this option. A static dir for /.well-known is a much more elegant solution than shutting down nginx... Thx for the pointer.